Professional-Cloud-DevOps-Engineer 試験問題を無料オンラインアクセス

Your company has recently experienced several production service issues. You need to create a Cloud Monitoring dashboard to troubleshoot the issues, and you want to use the dashboard to distinguish between failures in your own service and those caused by a Google Cloud service that you use. What should you do?

• A.Create a logs widget to display system errors from Cloud Logging on the dashboard.
• B.Create a log-based metric to track cloud service errors, and display the metric on the dashboard.
• C.Enable Personalized Service Health annotations on the dashboard.
• D.Create an alerting policy for the system error metrics.

You are responsible for creating development environments for your company's development team. You want to create environments with identical IDEs for all developers while ensuring that these environments are not exposed to public networks. You need to choose the most cost-effective solution without impacting developer productivity. What should you do?

• A.Create a Cloud Workstations private cluster. Create a workstation configuration with a runningTimeout parameter.
• B.Create a Cloud Workstations private cluster. Create a workstation configuration with an idleTimeout parameter.
• C.Create multiple Compute Engine VM instances without an external IP address. Configure an instance schedule to shut down the VMs.
• D.Create multiple Compute Engine VM instances with an external IP address and use a Public NAT gateway. Configure an instance schedule to shut down the VMs.

You are designing a new multi-tenant Google Kubernetes Engine (GKE) cluster for a customer. Your customer is concerned with the risks associated with long-lived credentials use. The customer requires that each GKE workload has the minimum Identity and Access Management (IAM) permissions set following the principle of least privilege (PoLP). You need to design an IAM impersonation solution while following Google-recommended practices. What should you do?

• A.Create a Google service account.
  Create a service account key for the Google service account.
  Create a Kubernetes secret with a service account key.
  Ensure that workload mounts the secret and set the GOOGLE_APPLICATION_CREDENTIALS environment variable to point at the mount path.
  Repeat for each workload.
• B.Create a Google service account.
  Create a Kubernetes service account in a Workload Identity-enabled cluster.
  Link the Google service account with the Kubernetes service account by using the roles/iam.
  workloadIdentityUser role and iam.gke.io/gcp-service-account annotation.
  Map the Kubernetes service account to the workload.
  Repeat for each workload.
• C.Create a Google service account.
  Create a node pool without taints, and set the Google service account as the default identity.
  Grant IAM permissions to the Google service account.
• D.Create a Google service account.
  Create a node pool, and set the Google service account as the default identity.
  Ensure that workloads can only run on the designated node pool by using node selectors, taints, and tolerations.
  Repeat for each workload.

You created a Stackdriver chart for CPU utilization in a dashboard within your workspace project. You want to share the chart with your Site Reliability Engineering (SRE) team only. You want to ensure you follow the principle of least privilege. What should you do?

• A.Share the workspace Project ID with the SRE team. Assign the SRE team the Monitoring Viewer IAM role in the workspace project.
• B.Click "Share chart by URL" and provide the URL to the SRE team. Assign the SRE team the Monitoring Viewer IAM role in the workspace project.
• C.Click "Share chart by URL" and provide the URL to the SRE team. Assign the SRE team the Dashboard Viewer IAM role in the workspace project.
• D.Share the workspace Project ID with the SRE team. Assign the SRE team the Dashboard Viewer IAM role in the workspace project.

You are running an application in a virtual machine (VM) using a custom Debian image. The image has the Stackdriver Logging agent installed. The VM has the cloud-platform scope. The application is logging information via syslog. You want to use Stackdriver Logging in the Google Cloud Platform Console to visualize the logs. You notice that syslog is not showing up in the "All logs" dropdown list of the Logs Viewer. What is the first thing you should do?

• A.Install the most recent version of the Stackdriver agent.
• B.Look for the agent's test log entry in the Logs Viewer.
• C.SSH to the VM and execute the following commands on your VM: ps ax I grep fluentd
• D.Verify the VM service account access scope includes the monitoring.write scope.